> [BUG] can write to anywhere in kernel. in the same subdir,> midi_synth.c:midi_synth_ioctl does __copy_to_user(not copy_to_user?). it> could be that there are some assumptions about the devices.> > /home/junfeng/linux-tainted/sound/oss/mpu401.c:792:mpu_synth_ioctl:> ERROR:TAINTED:792:792: passing tainted ptr 'arg' to __constant_memcpy> [Callstack:> /home/junfeng/linux-tainted/sound/oss/midi_synth.c:270:mpu_synth_ioctl((tainted> 2))]